picoclaw/.github/workflows
Guoguo f505f009df
feat(release): add macOS binary notarization via goreleaser (#1274)
Add notarize.macos section to .goreleaser.yaml using anchore/quill
for cross-platform code signing and Apple notarization of darwin
binaries. Covers all three build targets (picoclaw, picoclaw-launcher,
picoclaw-launcher-tui).

Notarization is gated on MACOS_SIGN_P12 being set, so releases
without the secrets configured will skip this step gracefully.

Required GitHub secrets:
- MACOS_SIGN_P12: base64-encoded .p12 certificate
- MACOS_SIGN_PASSWORD: certificate password
- MACOS_NOTARY_ISSUER_ID: App Store Connect issuer UUID
- MACOS_NOTARY_KEY_ID: App Store Connect API key ID
- MACOS_NOTARY_KEY: base64-encoded .p8 API key

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-09 18:50:11 +08:00
..
build.yml feat(ci): Remove fmt from build step 2026-02-20 22:09:36 +02:00
docker-build.yml feat(linters): Added golangci-lint config & CI job 2026-02-16 13:45:36 +02:00
nightly.yml feat(ci/cd) Add nightly build workflow (#1226) 2026-03-09 05:37:31 +01:00
pr.yml feat(ci) govulncheck (#1086) 2026-03-05 11:13:11 +08:00
release.yml feat(release): add macOS binary notarization via goreleaser (#1274) 2026-03-09 18:50:11 +08:00
upload-tos.yml feat: upload release artifacts to Volcengine TOS (#1164) 2026-03-06 11:47:29 +08:00